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We study a new QKD that is different from the scheme proposed by |10] . though it essentially takes 
our ground on three-player quantum games and Greenberg-Horne-Zeilinger triplet entangled state (GHZ 
state) [16] is used. In the scheme proposed in this paper, players in the game, Bob and Charlie (and Alice 
also) can get some common key or information (applied strategies and their payoffs in the game), when 
Alice informs Bob and Charlie about some results of the measurement made by her. Even if somebody 
else knows the public information, he/she can not get any key information. There is not any arbiter in our 
scheme, since existence of an arbiter increases the risk of wiretapping. Lastly we discuss robustness of the 
proposed QKD method for eavesdrop. We show that though maximally entangled case and non-entangled 
case essentially provide an equivalent way as QKD, the latter is not available in the case where there are 
some eavesdroppers. At the same time, we point put that the entanglement of the initial state is crucial 
i <~| when a partially entangled state is used. 
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G. 1 Introduction 

Quantum version of information science has opened the doors of new and large possibility of computer 
sciencepQ. Quantum game[5] is an interesting subject and remains in the realm of the unknown in potential 
capacities. Two schemes for quantum games mainly have been proposed so far. One has been proposed by Eisert 
et al. [3] where the strategy space of players is a two parameter set of 2 x 2 matrices and Prisoners Dilemma 
was discussed. It is shown that starting with maximally entangled initial state, the dilemma disappears for 
a suitable quantum strategy. Moreover they pointed out that a quantum strategy displays its superiority to 
all the classical strategies. The details of this scheme were also reviewed by Rosero 0). Another one has been 
introduced by Marinatto and Weber [5] applying it to the game of Battle of Sexes. In their scheme, starting with 
maximally entangled initial state, the players are allowed to apply the probabilistic tactics of unitary operators. 
As result, they found the strategy for which both the players can get equal payoffs. Recently two schemes could 
be studied by a unified way [5]. Two schemes are one aspect of the generalized quantization scheme developed 
by Nazawa and ToorJS]. Furthermore, the scheme was extended to three-player quantum games by Ramzan 
and Khan [9]. 

Quantum game theory is not only a tool to resolve a dilemma in some games and find better payoffs than 
ones of classical strategies, but also it has more potential ability and will provide wide types of communication 
protocols. For further details, you can consult the article given by Iqbalifij. In fact Ramzan and Khan studied 
an interesting aspects of communication based on three-player quantum Prisoner's Dilcmma[n]- Moreover 
the authors investigated a cryptographic protocol based on a scheme of the generalized three-player quantum 
game [10]. 

In classical cryptography in 20-th century, key distribution that generates a private key in a secure way 
between two or several remote parties is an important subject. In public key crypto-systems such as Rivest- 
Shamir-Adelman(RSA)[TT], the receiver generates a pair of keys; a public key and a private key. The security 
of the communication relies on the difficulty to factorize a large integer into some prime numbers. The public 
key is used to encrypt the message by a sender, while the private one is used for a receiver to decrypt it. But 
it has been proved that quantum algorithm can solve the factorization problem in polynomial time [12]. On 
the other hand, quantum information theory itself provides some ways of quantum key distribution (QKD). 
First protocol was proposed by Bennet and Brassard[13). After that Eckert proposed a different approach to 
QKD[]3]. Many protocols are developed as of today [TS]. 

Inspired by a series of researches, we propose a new kind of communication scheme based on three-player 
quantum game in this paper. We mainly study QKD that is different from the scheme proposed [10) . though it 
essentially takes our ground on three-player quantum games and Greenberg-Horne-Zeilinger triplet entangled 
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state (GHZ state) [TB] is used. In the scheme of [TU], Alice finds messages sent from Bob and Charlie by making 
a measurement of the qubits that are manipulated by their unitary operators. In our scheme proposed in this 
paper, Bob and Charlie (and Alice also) get some common key or information by knowing the some information 
of the measurement made by Alice. In [9] where the quantum version of Prisoner's Dilemma game is adopted, 
Bob and Charlie can extract information about the strategy applied by Alice from their payoffs by mutual 
understanding that they will apply the same strategy. This protocol stands as an information communication 
rather than QKD because this assumes the mutual understanding. The information about payoffs in [S] is 
brought by an arbiter. On the contrary there are not any arbiters in our scheme. Existence of an arbiter 
increase the risk of wiretapping, because when an arbiter sends classical information, but not quantum state, 
to Bob and Charlie, it is difficult to detect wiretapping. As it is better that there are not any arbiters in a 
protocol in view of wiretapping, an arbiter is excluded in our scheme. In the proposed protocol here, a scheme 
that Bob and Charlie (and Alice) can get some information (key) by results obtained from Alice's experiment 
and it can be made in the secrecy from other people. Thus it provides a sort of QKD. In fact Bob and Charlie 
(and Alice) can extract other people's full information (applied strategies and their payoffs) theoretically by 
the information shown by Alice. We show that methods using an entangled state and a non-entangled state 
essentially equivalent as QKD but a method using partially entangled state give a different one from the formers 
in the protocol. 

Lastly we discuss robustness for eavesdrop. We show that though maximally entangled case and non- 
entangled case provide an essentially equivalent way as QKD, the latter is not available in the case there are 
any eavesdroppers. 



2 Framework of Quantum Game 

The protocol proposed in this paper is based on three-player quantum games. Three players are Alice , Bob 
and Charlie following custom in this field. As result of the game, three player find other players' strategies and 
payoffs after Alice revealed some information to Bob and Charlie about the result of the quantum game. First 
of all we describe the framework of quantum games. 

Basically we follow the generalized formalism of quantum games proposed by Nawaz and Toor [5] and its 
extension given by Ramzan and Khan [5]. In scheme of this paper, Alice, Bob and Charlie can choose one 
among two strategies F and T, respectively. We express the strategies F as and T as 1, respectively and a set 
of strategies of three players as (0,0,1) for example. The set of strategies (0,0,1) denotes that Alice applies the 
strategy F, Bob does F and Charlie does T. 

First Alice prepares an initial quantum state that consists of three qubits and passes second qubit and third 
one to Bob and Charlie, respectively. Bob and Charlie accept one qubit, respectively and Alice keeps remaining 
one qubit that is first qubit. We suppose the initial quantum state shared among three players is the generalized 
GHZ state; 

|^„>=cos||000 >+isin||lll>, (1) 

where > 7 > tt/2. There is no entanglement for 7 = and the case of 7 = n/2 denotes maximally entangled 
state that has the largest von Neumann entropy. 

Next the players locally manipulate their individual qubits by some unitary operators; Alice, Bob and Charlie 
make the unitary transformations on the first qubit, the second qubit and third qubit, respectively. The classical 
strategies F and T are assigned to the two basis vectors |0 > and |1 > in the Hilbert space, respectively. The 
strategies of the players are represented by the unitary operator Uk defined by [5] 

U k = cos yi? fc -t-sinyQfc, (2) 

where k — A(Alice), B(Bob) and C(Charlie), and Rk and Qfc are unitary operators defined by 

R k \0>=e ia "\Q>, R k \l >=e- iak \l>, 
Q k \0>=e i ^-^\1>, Q k \l >=e^+^\0>, (3) 

where < 9k < 7r, and — ir < a k , Pk < T- After applying the local operators of three players, the density matrix 
of the initial state pi n = \ipin >< ipin\ changes to 

Pf = {UA^UB^Uc)p in {UA^U B ^Uc)^ (4) 
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After that, Bob and Charlie return their qubits to Alice and so Alice gets pf. To determine the payoffs for 
three players, we introduce the following payoff operator as a measurement operator; 



$( fc ) _ $ ^ P 000 + $ooi -fooi + $010^010 + $ioo-Pioo + $oii-Pon + $iio-Pno + $ioi-Pioi + $111-Ptll ; 



(5) 
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(6) 

with < S < 7r/2 and $^ c are the elements of the payoff matrix given in table 1. 6 denotes the degree of 
entanglement in the base for measurement (computational) base. In quantum version of usual game theories, a 
payoff is really given by an expectation value. In this scheme, Alice takes the final projective measurement (von 
Neumann measurement) in the computational basis given by Eq.(6). The expected payoffs for three players are 
obtained as the mean values of the payoff operators; 



P k (e k ,a k ,0 k ,5, 1 ) = Tr($ ( ^ c p f ) 



(7) 



where a,b,c G {0, 1} that mean strategies of three players and Tr is taken for above |0 a h c > basis. By using 
equations (1)^(7), the expected payoffs for three players are given by 

P k (6 k , a k , k , 5, 7 ) = C A C B Cc (m$ooo + *$in + £($ooo - O cos 2 ( a * + * c j) 

+ S A S B Sc (t? 2 $ooo + rfil - £($ooo ~ O cos 2(0 A + B + C )) 

+ C A C B Sc (??i$ooi + »?2$iio + £($ooi - $ffo) cos 2(a A + a B - 0c)) 

+ SaSbCc (%$oo ) i + m$iio - £($ooi - $no) cos 2(0 A + 0b - «c)) 

+ SaCbCc (m$ioo + rfii - £($ioo - $011) cos 2(-0 A + a B + a c j) 

+ CaSbSc (r/ 2 $ioo + m$oii + £($ioo - $011) cos 2(-a A + 0b - 0c) 

+ SaC b Sc (m$iol + m*$o - £($ioi - $oio) cos 2(0 A - a B + 0c)) 
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where 
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■ sin (5) sin(7), 
sui(6a) sin(6>s) sin( 



(9) 
(10) 
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This is a function of the entanglement parameters 7 and 8, strategy parameters of three players, a k , ft k and 
6 k , and the elements § abc oi a payoff matrix. New parameters iji, 772 and £ are essentially entangled parameters, 
and 6 k means the strategy parameter for player k. 

Table 1. The payoff matrix for a three-player game where the first number in the parenthesis denotes the 
payoff of Alice, the second number denotes the one of Bob and third number denotes one of Charlie. 
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3 Protocol for Key Distribution 

The proposed protocol is based on the three player quantum game. Basic idea is that three players can 
know the full information of game, other players' payoffs and strategies applied, when Alice open some classical 
information to Bob and Charlie. However, she can not get any useful information from it, even if Eva eavesdrops 
on the classical information. 



3.1 Basic Protocol of QKD 

First of all, we plainly describe the basic protocol proposed in this paper and the further details will be 
given the subsequent subsection. 

Notice that all players see the expression Eq.(8) for the expected payoff because they can evaluate it from 
the setting of the quantum game and it is assumed that Alice, Bob and Charlie see the classical payoff matrix 
described in Table 1 ( or Alice can set up the values in Table 1 to her convenience ) . The basic protocol is given 
by the following 7 steps. 

1. Alice prepares an initial quantum state represented by Eq.(l). 

2. Alice sends the second qubit and the third qubit to Bob and Charlie, respectively, but keeps the first qubit 
for herself. 

3. After Bob and Charlie accept their qubits, they and Alice locally manipulate their individual qubits by 
the unitary operator Eq.(2) and Eq.(3), respectively. Three players can choose a favorite parameter set 
(strategy) of the unitary operators. 

4. After that, Bob and Charlie return their qubits manipulated by their unitary operator to Alice. 

5. Alice performs von Neumann measurement of the payoffs based on the measurement basis Eq.(6) and find 
the strategies applied by Bob and Charlie from the results EI 



* It is a hard physical problem that what kind of physical experiment should be concretely conducted in order to determine a 
computational state shrunken at present. It is known that it is difficult that we even discriminate a special one from four 2qubit 
Bell states used well in quantum information science 18 .Thus it is beyond the limitation of this paper that author presents the 
concrete experiment that identifies GHZ with 3qubit. 
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6. Alice conveys some information relative to the game to Bob and Charlie. 

7. By the information, Bob and Charlie can find all information, including opponents' strategy and payoffs, 
of the game. 

What information Alice should send is determined on a case-by-case as will be described later on in the 
concrete. By the information, Bob and Charlie can find all information, including opponents' strategy and 
payoffs, of the game. Anyway, everyone has common information. If they come to an agreement about the 
correspondence between parameters applied in this protocol and some digital information each other in advance, 
they can have some common digital information. This is the essential scenario for the key sharing conveyed by 
the common information. The outline of this protocol is given in Fig.l. 

We show that the scenario is actually available in the following subsections. What information should 
Alice open to the public in the scenario? How can Bob and Charlie find others' information about the game? 
We will show them by giving concrete expressions for them. We investigate things dividing into three cases; 
non-entangled cases, maximally entangled cases and partially entangled cases. Explicit expressions of various 
quantities are, however, too complicate to analysis them. So we impose some symmetries or conditions on each 
case in order to simplify things. 



prepa res an initial state 

apply a unitary 
operation Ua 



send, 
qubit 



third . 
qubit 




apply a unitary 
operation 

Ub 



apply a unitary 
operation 

U c 



Fig.l The outline of the protocol^ 



3.2 Non Entanglement Cases 

In this subsection we consider the case without any entangled states, both the initial state and the compu- 
tational base. We take 7 = S — which leads to 771 = 1 and 772 = £ = 0, and assume that the phase parameters 
oti = pi = 0. 

Then we get the following formula for the expectation value of the payoff; 
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(20) 

Eq.(14)-(17) are the same equations, but they are available expressions for each player, respectively. xj^\ 
where X — D,E,F,G and k' = A,B and C, have proper information of player k' . 
In this stage, we can describe the details of the step 5 in the previous subsection. 

5-1 Alice performs a von Neumann measurement of the payoffs for three players by using the measurement 
basis Eq.(6), which is a sort of the physical observable. Then the final state shrinks to one of measurement 
bases with the possibility following quantum theory. For example, if the state shrinks to -0000, Alice finds 
measurement payoffs Pa = CaCbCc^qoq as Alice's payoff. The measured payoff is represented as Pa with 
subscript A to mark off from the expected payoff P A . 

5-2 Alice measure Bob's payoff and Charlie's one in the same manner. They can be simultaneously measured, 
because their operators are commutable each other. Then Alice estimates the ratio Pa ■ Pb '■ Pc- This 
value teaches Alice the shrunken state (?/>ooo in the present example). Notice this is possible only when 
Alice or a planner of the initial payoff matrix needs to alter the ration of $j^ c at every set of {abc}. Thus 

Alice can see to which state the final state shrinks from the ratio, if the ratio of the payoffs $^ : $S : 
is different each other for distinct a, b, c. 

5-3 Alice can find strategies adopted by Bob and Charlie (of course her strategy Ca), as Alice knows to 
which state the measured state shrunk. For the example of 5.1, Alice see CsCcQ. By using these values, 
Alice calculate the expected payoffs for three players and informs some information relative to game. As 
mentioned later, there is a case that all goes well only by getting the product value CbCc- 

It is assumed that all players see the classical payoff values described in Table 1 or Alice informs the classical 
payoff values set up in Table I by her to Bob and Charlie. What even more information should Alice convey 
for Bob and Charlie to get information about opponents' payoffs and strategies? Notice that three players see 
the expression Eq. (8) of the expected payoffs. For Bob, unknown data are P A , P B , P c , Ca and Cc which 
are strategies of Alice and Charlie (notice that a k = fik = and of course Bob knows his strategy C B ) ■ Taking 
account of k = A,B,C, Bob has three payoff equations given by Eq.(16) for k — A,B,C. So Alice needs to 
open two data among them to the public. Thus Bob can evaluate other unknown data in principle. It, however, 
is too intricate to get explicit expressions. Imposing some conditions or symmetries will make the expressions 
simpler but non-trivial. 

Due to the aim, Eq. (15)-(17) is rewritten as followings; 

P k (6 k , 0, 0, 0, 0) = C B C c {Df - Ef - Ff + G^) + C B (F { A k) - G {k) ) 

+C c (E A k) - G (k) ) + G {k) for Alice (21) 

= CaCc (D {k) - E {k) - F [k) + G {k) ) + C A {F B k) - G (k) ) 

+C c (E (k) -G {k) ) + G {k) for Bob (22) 

= C a Cb (D {k) - E {k) - F {k) + G {k) ) + C A (F^ - G {k) ) 

+C B (E {k) - G {k) ) + G (k} for Charlie (23) 

It is natural to classify into the following three cases to simplify the things from Eq.(21)-(23); 



Case I: (F A k) - G {k) =)F {k) - G {k) = FjP - G (k) = 

<t( fe ) _ <t( fe ) ctW _ a;( fe ) „„J <p(k) _ $(k) 
'■"OOI — 5 101' °011 — ^lll dllu '"OIO — -"llO' 

1*001 - *101 - *011 - ana S 010 — S 1107' l Z4 J 



Case II: (E {k) - G (k) =)E$ - G {k) = E {k) - G {k) = 



'If Alice wants to know 9b and 0q, independently, all players have only to play once again with the same strategies as ones 
in the first round. The same value will be unluckily observed with the probability of 1/8. Then one more round is needed but 
repeating rounds drastically (exponentially) reduces such unlucky observation. 
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where the equations within the parentheses denote the cases that the conditions are also imposed on Alice. 
Alice is a special person in the sense that she puts together everyone's states, observe the payoffs by making 
a measurement and so can see all P k and Pk, and announce them. Thus Alice has fully information about 
this quantum game in the end. In above three cases, we can not take k — A, B, C but should take two among 
A,B,C as k, because we need to satisfy the condition that the ratio of the payoffs : $^ : $j^2 ^ s different 
each other for distinct a, b, c when k = A,B, C. as mentioned in the step 5.2. 
In the case I without — G^ = 0, we obtain 
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Notice that E^ — F A ® — G^ — Sqqi in this case. These quantities arc trivial in the sense that they 

do not depend on Alice's strategy and only depend on the payoff matrix originally opened to the public. X^ f 
where k' — B, C, however, is nontrivial and depends on both payoff matrix and their respective strategy. Thus 
this condition does not make above expressions trivial. 

When k takes A and B in the Case I, from Eq.(27) and (28), we see that when Alice opens P A and P B to 
the public, Bob and Charlie can find C A . As result, they can get the information about opponent's strategy, Cc 
for Bob and Cb for Charlie. So Bob and Charlie can find the strategies of all players and evaluate P k . Three 
players come to acquire full information of the quantum game, P k and Ck, since Alice originally observes all 
states and payoffs. 

When Alice informs Bob of P A and his expected payoff P B , and Charlie of P A and his expected payoff P c , 
they can also get full information according to the equations derived from Eq.(22) and (23) for Charlie. This 
case, however, can not be impossible, because Alice needs k to be A, B and C in the condition of the Case I, 
which was not allowed. 

There is another case to be considered. Alice opens all of her information, Pa and Ca- Then Bob and 
Charlie can easily evaluate the strategics of their opponent from Eq.(27) and (28). So they can also know full 
information of this game by similar logic to the former case. Everything also does not change in the case I 
including F [ A k) - G^ = 0. 

(k) (k) 
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Notice that E^ = G^ = $[ k ^ Q in this case. When including — G^ — 0, one more equation = $ ^q 
is added to the relations. These quantities are trivial in the sense that they do not depend on three players' 

(k) (k) 

strategies and only depend on the payoff matrix originally opened to the public. Only Fg and D y k/ , however, 
are nontrivial and depend on both payoff matrix and their respective strategy. Thus this does not make above 
expressions trivial. 

Then we see that when Alice open P A and P B to the public, Bob and Charlie can find Ca- As result, they 
can get the information about the opponent's strategy, Cc for Bob and Cb for Charlie. So Bob and Charlie 
can find the strategies of all players and evaluate Pq- Three players come to acquire full information of the 
quantum game, P k and Ch- 
it is also impossible that Alice informs Bob of P A and his payoff P B , and Charlie of P A and his payoff P c , 
because of the same reason as in the Case I, 

There is another case to be considered. Alice opens all of her information, Pa and Ca- Then Bob and 
Charlie can easily evaluate the strategy of their opponent from the following Eq.(31) and (32). 

Cc " ' f " Bob (31) 

C B = Gc uf< A) ° for Charlie. (32) 

Ca(D^-F^) 

They can also know full information of this game by similar logic to the former case. 
Everything becomes simpler in the case III. From Eq. (21)-(23), we obtain 



P k = CaC c (dP -F { B k) ) + G {k \ 



Gi A) 



C c = tt; 3 nr, , for Bob. (33) 

C A (D^-F^y 

P k = C B C c {D ik) -F {k) )+G {k \ 

pA _ q(A) 

°b = TaS ° TaS ■ for Charlie. (34) 



C A (D^-F^ 



(35) 



Then E^ = G^ = F^ = $wo- When Alice opens P A and C A to the public, all players know full information 
of this game for the same logic as before. 

If the further condition D^) = F^f* and E^) = G^} adding to Case III is imposed, we have only a trivial 
result. Then we notice that = and $ { % = ${%, = ${ k Q \ and $^ = from D (k) = F {k) 

and E^ = Gg\ Moreover we notice that $ q = $oii an( ^ $011 = $ooi> $111 = $ioi an d $ioo = $110 from 
D (k) = F c k) and E {k) = G^ . So $ (k J b take all the same value and $ (k J b take so. After all, = F^ = $$ , 

Eq^ = Gp' = $^qq and E^ = G^ — $[%■ Thus all X^s' are trivial and have no private information for Bob 
and Charlie. 



3.3 Maximally Entanglement Cases 

We consider the maximally entangled cases in the initial state and the computational base where 7 = c> = 
7r/2. Then we see that £ = 771 = rj2 = 1/2 and the last term in Eq.(8) that the coefficient of the term is 
|sin[0A,0B,0c] vanishes. When 9b = 0c = 0, we obtain the trivial expected payoff; 

P k = Ca$ooo ^ &4$ooi- (36) 

So all people including eavesdropper Eva can obtain full information of this game as soon as Alice opens 
something of (classical) information of this game to the public. If Alice privately conveys it to Bob and Charlie, 
Eva can obtain full information by eavesdrops. Since the information is a classical type (note the information 
such as P k and Ck is classical), it is difficult to detect the eavesdrops. 

We take pk = a k = for simplicity but Qa0b®c 7^ 0. Then we obtain the following equations for the 
expectation value of the expected payoff; 

P k (6 k , 0, 0, tt/2, tt/2) = CaCbCc^I + SaSbSc^ + C A C B Sc%^ 1 + S A S B Cc${% 
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where 



+5 , aCbCc$oii + C'aSbSc^iqo + SaCbSc^ow + C a SbCc§wi, (37) 

= C B C c D' ( A k) +S B S c Ef ] +C B S c F' A {k) +S B C c Gf\ for Alice, (38) 

= C A C c D% k) +S A S c Ef ] +C A S c Ff ] +S A C c Gf\ for Bob, (39) 

= C A C B Df ] + S A S B E' c k) + C A S B F^ k) + S A C B Gf\ for Charlie, (40) 



D (k) 

A 


C <t( fe ) 
— ^A^OOO 


+ <SU$oii, 


Ef 


r< «( fe ) 


+ fti$' 


p (k) 
A 


_ n a>(fc) 


+ 'S'aSiio) 


r (k) 


_ (~t <r>(k) 
— °^ S 100 


+ 5*/!$' 


D {k) 

B 


— ^5*000 


+ S'sSioi) 


4 fe) 


_ n <|>(fc) 


+ S B $ 


r B 




+ Sb$oii> 




_ f~i a>(fe) 
- ^B*010 


+ >Sb$ 




- °c»ooo 


1 c <t( fe ) 


4 fc) 


- °C» 11 


+ 5 C $; 


b c 


— ^C»ioi 






= Cc$iio 





(fe) 

110' 

(fe) 

111' 

(fe) 

111' 

(fe) 

111' 

(fe) 

010' 

(fe) 



(41) 
(42) 
(43) 



By comparing these equations to (14)-(20) in the non-entangled case, we find that both expressions are 
transferred from one hand to the other by exchanging 100 -R- 011 and 010 -H- 101. So there is a sort of symmetry 
in the both cases; 



100 < — 011 and 010 < — > 101. (44) 

Thus there is no essential difference between maximally entangled case and non-entangled case. 

We give a little comment on the cases of a k ^ 7^ ft. In both non-entangled case and maximally entangle- 
ment case, the last term in Eq.(8) vanishes. Then both cases with at ^ ^ ft are linearly transformed each 
other in the elements of a payoff matrix such as; 

/ ill + £ cos(avt + a B + a c ) m - £ cos(aA + a B + a c ) \ / $000 \ 
\m-Z cos(ft + I3 B + Pc) m + £ cos(ft + Pb + Pc) J \ $m / ' 
/ -qi + £ cos(aA + a B - P c ) m-i cos(o:a + a B - Pc) \ ( $001 \ 

V V2 - £, cos(ft + Pb - a c ) m+ \ cos(ft + Pb - a c ) ) \ $110 / ' 
/ 771 - £cos(-ft + a B + a c ) 1)1 + £ cos(-Pa + a B + ac) \ ( $100 \ 

V m + £, cos(a A — p B + Pc) m~t cos(a A - p B + p c ) ) \ $011 / ' 

/ ?7i - £cos(ft - a B +Pc) V2 + £cos(P A - a B + Pc)\ ( $101 \ 
\m +£,cos{a A - p B + a c ) m - £ cos(aA - Pb + a c ) ) \ $101 )' 

So in both non-entangled case and maximally entangled case, Qj. ^ ^ ft does not have any crucial influence 
on previous results in this paper. 




3.4 Partially Entangled Cases 

We take a k = = ft, p A — ft — n and ft + ft = 2n for simplicity but 9 A 9 B 9 C 7^ 0. There are many 
equivalent choices of these parameters and the this choice is only one example among them. The following 
discussions show that QKD is feasible even in this special case including further condition added later. 

Then we obtain the following equations for the last term in Eq.(8); 

P k (e k ,0,p k ,S,j) last = lsin[0 A ,0 s ,0 c ]{sin(5-7) £ Si^-l)^ 6 ^}. (46) 

a,b,ce{0,l} 

So we consider the case of S = and 7 = tt/2, or S = tt/2 and 7 = as a partially entangled case. Under 
this choice, we obtain 

m = V2 = \, e = o, (47) 

P fe ((? fc ,0,ft,<5,7W = ±VC A C B C c S A S B Sc ^c(-!) (a+b+c) ' ( 4 ») 

a,6,ce{0,l} 
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where ± corresponds to two choices of S and 7. From Eq.(48), Eq. (8) is rewritten as follows; 

P k (9 k ,0,(3 k ,8,j) = ^{$ooo( c ACBCc ± SASBSC^j + {c-ac-bCc T saSbi 
+ $001 (°acbsc T s^sbcc) + $no (cacbsc ± sa^bcc) 
+ $100 {sacbcc T casbs c ) + $011 (s^cscc ± c^sssc) 
+ $^oi (sacbsc ± c^sbcc) + $010 (s^cbSc T cas b cc) } , 



(49) 



where 



to 



c fc =cos(y), and s k = sin(y). (50) 

When Alice chooses her strategy parameter 8a = 7r/4, the above formula is transformed 

P {0 k ,O,0k,6,V = ^{$ooo cos ( 2 ) + $ iii cos ( 3 ) 

+ $Ssin 2 (^) + $Ssi^ ( ^£) 

+ $l fe o cos 2 (^) + $Scos 2 (^) 

+ $Ssin 2 (^|^) + $< ) fe 10 si n 2 ( ^£). (51) 

As pointed out in the subsection 3.2, Alice can find 9b and 9c by carrying out 1<~5 twice in the subsection 
3.1. Thus Alice can evaluate the expected payoffs for all players. 

Furthermore we impose a condition on the payoff matrix to make the analysis simpler. 

a>( fe ) _ $( fe ) $( fe ) _ $( fc ) dj(fc) _ ft(fc) ft(fc) _ $(fe) /C9\ 

""ill — ""OOO' ^001 — ""110' ""lOO — ""Oil: ^101 — ^010' \ 0Zj ) 

where k~A and C due to the same reason as in the subsection 3.2. This is a sort of duality, since this means 
$abc — $abc where = 1 and 1 = 0. We call this duality NOT-duality that also means F T symmetry. 
Under this NOT-duality, we obtain 

P k (8 k , 0, h, 6, 7 ) = {$ooo (CaCbCc + S A S B S C ) + $ oi (c A C B S c + S A S B C C ) 

+S 00 (SaCbCc + CaSbSc^J + $101 {SaCbSc + CaSbCc^ j (53) 

(54) 
(55) 
(56) 

Here Bob and Charlie do not necessarily know Ca and we introduced the following symbol like the previous 
cases; 



- C B C C ($ooo 


_i_ tt( fc ) 

^100 ~~ 


<t(fe) 

""001 ' 


-$( fe )) + C B (Ff 


-Of) 


+c c (4 fe) - 






for Alice, 




= C A C C ($ooo 


, <t(fe) 

+ *101 ~ 


^001 " 




-4 fc) ) 




-4 fc) ) + 


Mk) 


for Bob, 




= CUCs ($000 


i <R(fe) 
T ""001 




- $io J + <^B(f C 




+CU(4* } - 






for Charlie. 





f)(fc) 

A 


— L-A^OOO " 


h ^$100 


4 fc) = 


°A»ioi - 


- ^Aa>ooi' 


p(fe) 


— l-a^ooi " 


h SU$ioi 


r-(fe) _ 
b i - 


Ca$ioo " 


- S'aSooo' 


£,(fe) 
B 


— L-B^OOO " 


1- SbS 10 i 


E (k) - 

B ~ 




1- 5'-B$ooi> 


p(k) 
B 


- <^B»001 " 


1- ^$100 


Mk) _ 

u B - 


°s*ioi - 


1- S B $ooo ^ 


U C 


— <^C<1>000 " 


h ^C^ooi 


4 fe) = 


°C*ioi - 


h ^C*100' 




r< $( fc ) 


h <Sc$ioi 




r< $( fe ) 

^C»001 " 


h ^Cfl'ioo- 



(57) 
(58) 
(59) 
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The expressions of these equations are changed each others under the following transformations; 



Bob Charlie 
Bob <=> Alice 
Alice <=> Charlie 



101 < — > 001 X B i — ► X c , (60) 
100 < — > 101 X B < — > X A , (61) 
100 < — >001 X A i — >X C . (62) 



For example, when Alice opens Ca = cos 2 (7r/8) (6 a = 7r/4) and Pa to the public, Bob and Charlie can find 
the strategies of their opponents, respectively; 

p a - r * (f {a) - r {A) \ + r {A) 

Cc = B )+ { % — , for Bob. (63) 

CU($ooo + $101 — $ioo — $ooi) + {E B — G B ) 

C B = P - Ca{Fc -° c ) + G ( % — , for Charlie. (64) 

CU($ooo + $ooi — $ioo — $101) + {E B — G B ) 

As result, they find full information of this game. 

Even if Alice opens the expectation values of P A and P B based on her observation, Bob and Charlie can 
also find full information of this game. However, the expressions are too complicate to describe them and such 
too complicated results are not so available for realistic QKD. We consider the following symmetric cases for 
k = A and B; 

(65) 
(66) 
(67) 

Case (I); 
we obtain 

t>a © i r< iq <t \ 

(68) 
(69) 

As result, Bob and Charlie can find full information of this game when only P A is opened to the public. 

Case (II); 
we obtain 

P A — $000 — Cb{% 100 - $000 ) r o i /~n\ 

Cc = 77^ TTjz 5 v , for Bob. (70) 



(I) 


Ef = G { * ] , $ 


(fe) _ q 
100 — 3 


'101 


QTlr 1 «( fe ) _ <t( fc ) 

ana 3> 001 — $ 000 , 


(II) 




(fe) _ q 
001 — 3 


'101 


q?( fe ) _ <t(fe) 
ana d 100 — $ 000 , 


(III) 


E^=F B k) =G^ ,$ 


(fe) _ q 
001 — 3 


•(*) 
>101 


— et( fe ) _ <t( fc ) 

— ""lOO — ""ooo- 


C c = 


P A — $110 + Cb($ioo 


— $001 


) 


for Bob. 


(2Cb — l)($ioo — 


$001 ) 




C B = 


P — $110 + C*c($ioo 


— $001 


) 


for Charlie. 


(2Cc — l)($ioo - 


$001 ) 





(2C B -1)($ 100 ' 



POOOi 



P A — $000 + Cc ($100 — $001 ) r riu i- \ 

Cs = j-^ -tt^ = r • for Charlie. (71) 

\^c — lJ(*ioo — *00lj 

So essentially this case is as same as the case (I). Knowing P A makes all players find full information of this 
game. Thus knowing P A is only needed to hold full information of the game in common in both Case(I) and 
(II). That such economical point can be realize is a notable feature in the partially entangled case. 
Case (III); we only obtain a trivial result; 

P k = G\, = 1. (72) 



3.5 More Protocol 

We make the QKD protocol described in the subsection 3.1 more definite so as to be consummate one. 
The procedure given in the subsection 3.1 has to be repeated many times to distribute a key with a large bit 
to all players. First of all, it is imperative that three players ahead recognize the correspondence between the 
information of the game and some natural numbers; 

C^ r) mjf' for 2r-th round, 

P k( - r *> <^=> 4 r) for 2r-t/i round, , (73) 
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(r) (r) 

where k is A or B or C, and m k and n k are some natural numbers, respectively. Thus every player obtains 
a common number 

(1) (1) (1) (1) (2) (2) (2) (2) (r) (r) (r) (r) ,~ A s 

m B m c B n C m B m c n B n C ' ' ' m B m C B C ' ' 

as a key information by repeating the procedure given in the subsection 3.1 2r times. We can obtain a key 
number with double the length of the round number. 

4 Brief Comment of Robustness for Eavesdrop 

4.1 Phase Damping Model for Eavesdropper 

There may be an eavesdropper, Eva, in a quantum line from Alice to Bob or Charlie. She may perform a 
measurement on the qubit that Alice (Bob or Charlie) transmits to Bob or Charlie (Alice). We follow Ramzan 
and Khan [10] in the discussion as to security against bugging. 

An action of measurement performed by Eva on the qubit can be modeled as the action of phase damping 
channel pQ. After measurement by Eva, the quantum state with 1 qubit that Alice transmitted to Bob and 
Charlie is transformed into 



Pi 



where Aq — ■Jp\0 >< 0|, Ai — ^/p\l >< 1| and A 2 = ^/l — pi with the identity operator / are the Kraus 
operators [Tj. These operators are the same as ones in the phase flip channel whose channel flips the state of a 
qubit from |0 > to |1 > with probability ppQ. 
This can be extended to 

2 

Pn = J2 A n ® A i2 ■ ■ ■ ® A *n ® PinA\ N ® • • • A\ ® A\ (76) 
i=0 

for N qubits, where the Kraus operator is described as Ai S for each qubit s, when each qubit is measured. Then 
the payoff is given by the following replacement in Eq.(8); 

^(a+b+c) ^ n p (-l)( a + b+c \ (77) 

where fi p = 1 — p. 

4.2 Non-Entangled and Maximally Entangled Cases 

In this subsection we focus our attention to the non-entangled case (7 = 5 = £ = 0) and maximally entangled 
case (7 = 5 = tt/2 and £ = 1/2). Then the payoff is obtained for both cases by 

P k (e k ,a k ,p kll ,S) = C A C B C C (m $oob +%$ii ) i +£M$ooo - $iil) cos2 K +«b + ac)) 

+ S a SbS c (r) 2 $$ + Vi$ui ~ £Mp($ooo ~ $m) cos 2(/3 A + fa + fa)) 

+ CaCbSc (??i$ooi + »»$uo + £M P ($ooi ~ $uo) cos 2(a A + a B - p c )) 

+ SaSbCc (»?2$ooi + rfio - £m p ($ooi - $110) cos 2(/3 A + /3 B - ao )) 

+ 5 A C B C C (jfcS^ + 7/2$^ - e/fp($iSi - $ oii) cos 2(-/3 A + a B + a c )) 

+ C A 5 B 5 C (yjaS^o + m$oii + £M P ($ioo - $ou) cos 2(-« A + - /3 C )) 

+ SaCbSc (mSioi + ^$ofo - ~ S010) cos 2(j3 A - a B + Pc)) 

+ CaSbCc (r? 2 $^i + ^010 + £M$ioi ~ $010) cos 2{a A - Pb + ac)) • (78) 

In such as the previous cases, taking a k — P k = 0, the expected payoffs are obtained for the non-entangled case 
and maximally entangled case as the follows; 

P k (9 k , 0, 0, 0, 0) = C A C B Cc$$ + SaSbSc^W + CaCbSc^ + S A S B C C ${% + S A C B C C ^ 
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CaSbSc$qii 



SaCbSc$ioi 



r 1 q r 1 (c(^) 



P k (6 k ,0,0,Tr/2,ir/2) = - 



CaCbCc f$ooo 
CaCbSc (§ 
SaCbCc ( 
SaC'bSc 6 



c (fe) 



'000 



'ill 



R (fc) 

'ooi 

R (fc) 

"100 



R (fc) 

'101 



for non-entangled case, 
+ Biii + Mp($ooo - $m)J + SaS b S c 

SaSbCc ($ 

)) + CaSbSc (Sura + Boil + Mp($ioo - $oii )) 
CaSbCc ( 



'no 



Mp ($ (fc) - * W 



001 

J _ ,, At0) 

! ' 1 MpV^lOO 

Mp($ioi ~~ 



"oio 



110, 

'on; 

R (fc). 
"oio. 



e (fe) 

p 001 

s (fe) 

'100 

6 (fe) 

'101 



,(/=) 

'110 



Mp($000 

Mp($ooi 



(79) 



6 (fe). 
'no. 

"on; 

<>oioJ 



"oio t f*pV w ioi 
for maximally entangled case. (80) 



We observe that \i p vanishes from P k in the non-entangled case. So we can not detect the influence of wiretap- 
ping. But P k depends on ^ p in the maximally entangled case. Thus we can detect a wiretapper by comparing 
two payoffs (one has original value and another has a deviate value from it). Notice that when a k f3 k ^ 0, tuning 
the values of a k and f3 k obscures \x v dependence on the payoff. As result, detecting wiretappers is available only 
at a k — (3k — 0. 

Though the maximally entangled case and the non-entangled case provided essentially an equivalent way as 
QKD in the previous section, the latter is not available in the case with wiretappers. 



4.3 Partially Entangled Cases 

In this cases, (i) 8 = and 7 = n/2 or (ii) S = n/2 and 7 = 0. Moreover QaObQc 7^ 0, a k = = Pc, 
Pa — Pb — 7T and (3a + Pb — 2tt are chosen for simplicity like in the subsection 3.4. 
Then we obtain the following expressions for the last term in Eq. (8); 



P k (e kl 0,p klll 5) last = ^ pS m[6A,6 B ,6c}{sm(S-j) £ $<&(-l) (o+6+c) }, for (5 7 7) = (0, tt/2), 

a,6,c6{0,l} 

= -isin[^,0 B) c ]{sin(S-7) £ ^ c (-l) {a+b+c) } , for (5, 7) = (tt/2, 0)(81) 



o,b,c£{0,l} 



So the payoff is obtained by 
P k {6 k ,0,p kll ,5) = ~[( 



,0) 



e (fc) 



c c c ( <c( fc ) _i_ qC ) 1 _i_ c c n ( _i_ 1 _i_ c c c ( <c( fe ) _i_ 

JAJBL'C I *001 + *110 J + 'JAObL'CI <t>ioo + *011 J + ^AOBOC\ *100 + *011 

5aC b 5 c ($ 1 o ) 1 + + C A 5 B C C ($S + $<$,)] + £<?.(81). 





+ $ 


1^000 




(AO , < 


Jk) 


100 1 


'011 


(fe) , ( 


R (fe) 


101 "T 1 


"oio 



(k) 



,(fe) 
'001 



R (fc) 
'110 



(82) 

Thus the payoff depends on fj, p = 1 — p only in the case (i) from Eq. (81) and (82). In principle, we can detect 
an eavesdropper, only when the parameters are (i) 6 = and 7 = 7r/2. From 4.2 and 4.3, we find that when 
7 = tt/2 where the initial state is an entangled state, we can detect an eavesdropper. 



5 Summary and Consideration 

In this paper we proposed a new QKD method. This method is different from the scheme proposed by [ID) , 
though it essentially takes our ground on three-player quantum games and GHZ state as an entangled state [16 
is used. 

Alice , Bob and Charlie join the game. Alice prepares the initial quantum state, and sends the second qubit 
and third qubit to Bob and Charlie, respectively, but keeps the first qubit for herself. After Bob and Charlie 
accept their qubits, they locally manipulate their individual qubits by some unitary operator, respectively. 
Three players can choose a favorite parameter set of the unitary operators. After that, Bob and Charlie return 
their qubit manipulated by their unitary operators to Alice. Alice performs a measure of the total state (3 
qubits)to determine the payoffs, and conveys some information drived from von Neumann measurement to Bob 
and Charlie or opens to the public. By the information, Bob and Charlie can find opponent's strategy and 
payoff of the game. Thus everyone has common information. There are not any arbiters in our scheme, since 
existence of an arbiter increases the risk of wiretapping. For it is difficult to detect wiretapping, when an arbiter 
sends classical information. 
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We investigated by dividing our protocol into three cases, non-entangled cases, maximally entangled cases 
and partially entangled cases, to analyze it. We found that non-entangled cases and maximally entangled ones 
are essentially equivalent, since they are converted by a linear transformation each other. On the contrary, the 
partially entangled case has a little particular property and produces a sort of dense coding method. 

Lastly we discussed robustness for eavesdrop so that we showed that though maximally entangled case and 
non-entangled case provided essentially equivalent way as QKD, the latter is not available in the case there are 
eavesdroppers. The effect of eavesdropping disappears from the payoff in the non-entangled case. In partially 
entangled case, we find that we can detect an eavesdropper by choosing some suitable parameter for S and 7, 
especially 7 = n/2, in principle. So this case gives a robust protocol. As summary, we showed an entangled 
initial state (7 7^ 0) gives robust protocols in the all cases of this paper. 
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